10 Commits
Author SHA1 Message Date
Jean-Philippe Evrard 94806e8856 fix CVE-2026-39822
Without this, trivy will fail.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-07-28 11:28:11 +02:00
Dharsan Baskar 9b1319e1b5 ci: update GoReleaser config to include footer with contribution details
Signed-off-by: Dharsan Baskar <git@dharsanb.com>
2026-06-30 17:14:09 +05:30
Jean-Philippe EvrardandGitHub c775910f6d Merge pull request #1355 from evrardjp/improve_testing
Simplify testing
2026-06-29 18:57:05 +02:00
Dharsan Baskar 5dcdc2874a chore: remove redundant DH_ORG environment variable and add registry as a configurable variable.
Signed-off-by: Dharsan Baskar <git@dharsanb.com>
2026-06-11 13:29:03 +05:30
Jean-Philippe Evrard 8830c0bc9d Add github actions linting
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-10 20:04:41 +02:00
Jean-Philippe Evrard 315d8e0475 Add github release changelog text generation
Without this, we will not produce text that is basically exactly
what we do.

By using goreleaser github-native method, we will also generate
the usual changelog.

The only remaining part would be to edit it for the extra manual
messages we add.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-09 09:49:54 +02:00
Jean-Philippe Evrard b91831b9bb Migrate mise config file
Now that we have a .config folder, we can move mise into such
folder, to clean up the root of the directory

We therefore fix the contributing guide link with new location.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-09 09:20:08 +02:00
Jean-Philippe Evrard e531f64b85 feat(release): let GoReleaser manage artifacts
GoReleaser now builds the multi-arch images,
publishes SBOM/provenance metadata, signs image digests, and attaches
the generated combined Kubernetes manifest to tagged GitHub releases.

This is to have goReleaser as a single point of work for release
automation. With this, so tags and main commits follow one consistent
image pipeline.

We keep the CI and developer image builds intentionally local.
PR, periodic, main, and tag scan jobs build only `kured:dev` and scan that
local image with Trivy, which avoids pushing disposable images and keeps
the tested image identical to the one used by kind-based e2e tests.

Simplify the Makefile around the remaining artifact boundaries: `build` for a
local GoReleaser binary build, `dev-image` for local Docker/e2e/scan use, and
`release` for the GoReleaser publish path. Remove the old manual manifest
target because the release manifest is now generated during the tagged release
flow.

To avoid a mess with all the configuration files, I move everything into
a `.config` folder, for the tools supporting it.

This also meant updating golangci-lint to a valid v2 config, and simplify
the Dockerfile to the layout expected by GoReleaser `dockers_v2`
using `TARGETPLATFORM`.

Handle Prometheus client initialization errors explicitly so the stricter
errcheck configuration keeps the existing fail-closed reboot-blocking behavior,
to fix the golangci-lint issue that appeared.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2026-06-09 09:19:04 +02:00
Jean-Philippe EvrardandJean-Philippe Evrard 5c3b6e5294 Revert "Bump GoReleaser to version 2"
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2025-11-02 10:36:49 +01:00
Dharsan Baskar f82a42e41f ci: bump goreleaser to version 2
Signed-off-by: Dharsan Baskar <git@dharsanb.com>
2025-10-09 10:09:08 +05:30